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IN THE SPECIFICATION 

Please amend the abstract as follows: 

The malware definition data [34 ]of [a] mobile data processing devices [2, 6 ]is updated 
via a data channel associated with a wireless telephony link to that mobile data 
processing device. The data channel may be the same channel used for SMS messaging 
and the transfer of control information. The mobile data processing device is typically a 
mobile telephone. The update data may be digitally signed to increase security. 

[Figure 3] 

Please amend the paragraph spanning page 6, lines 8-20 as follows: 

FIG, 1 shows a first m obile data processing device 2 in the form of a mobile telephone 
connected via a GSM or CDMA public wireless telephony network to a base station 4. 
Also illustrated is a second m obile data processing device J> in the form of a personal 
digital assistant [6} connected via an infrared link to a mobile telephone 8 which is in turn 
connected via a public wireless telephony link to a base station 10. The base stations 4, 
10 are connected to a base station switching centre 12 which is in turn connected to a 
central mobile switching centre 14 for the public wireless telephony network concerned. 
Provided at the mobile switching centre 14 is an SMS service centre 16 which is 
responsible for managing the transfer of SMS text messages to and from connected 
mobile data processing devices 2, 6. These SMS messages pass over a data channel 
within the public wireless telephony network to the mobile data processing devices 2, 6. 
This same data channel can be used for transmitting non-text data, such as control data or 
in the case of the present technique malware definition updating data. 

Please amend the paragraph spanning page 7, lines 4-1 0 as follows: 
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FIG. 2 schematically illustrates a system 20 including a malware scanner [20J30 that may 
operate within a mobile data processing device 2, 6. Mobile data processing devices 2, 6 
are becoming increasingly complex and are adopting an arrangement similar to 
conventional fixed data processing devices in that they use an operating system 22 which 
coordinates interaction with the physical systems on behalf of one or more application 
programs 24 that may be executing. The file storage 26 within such a device will 
typically be in the form of nonvolatile compact storage, such as RAM memory, flash 
memory or the like. 

Please amend the paragraph spanning page 7, lines 12-23 as follows: 

When an application program 24 makes a request to the operating system 22 to access a 
computer file stored in the file storage 26, this request is intercepted by an anti-vims 
interface 28 within the operating system 22 and details of the file access request and the 
file itself are passed to a malware scanner 30. The malware scanner 30 effectively takes 
the form of another application program running on the operating system 22. The 
malware scanner 30 includes an anti-virus scanning engine 32 and [a library ofl malware 
definition data (e,g, virus definition data 34). The malware scanner 30 operates upon the 
file received to search that file to see if it contains code matching the virus definition data 
that would be indicative of the computer file being infected with a computer virus. A 
pass/fail result is passed back via the anti-virus interface 28 to the operating system 22. 
The operating system 22 will then either allow the file access to proceed normally or 
trigger anti-virus action if a virus has been detected, e.g. deletion, disinfection, 
quarantine. 

Please amend the paragraph spanning page 8, lines 1-1 1 as follows: 

FIG. 3 schematically illustrates the processing that may be performed by a mobile data 
processing device 2, 6 to update its fmalware lvirus definition data 34. At step 36 the 
device 2, 6 waits until data is received upon its data channel that forms part of the 
wireless telephony link via the public wireless telephony network. It will be appreciated 



PAGE 6123 1 RCVD AT 10/1312005 5:39:38 PM [Eastern Daylight Time] ' SVR:USPT0-EFXM ' DNIS:273830fl 1 CM89714660 ' DURATION (mnvss):05-20 



OCT. 1 3. 2005 2:50PM ZILKA-KOTAB, PC 



NO. 0546 P. 7 



-4- 

that the mobile data processing device 2, 6 will previously have established such a 
wireless telephony link in accordance with the standard operation of mobile phones and 
the like. When a mobile phone establishes such a link, it registers with a base station such 
that the base station and public wireless telephony network is notified of the telephone 
number of the mobile telephone concerned such that telephone calls and data, such as 
SMS messages and malware definition update data, can be routed to the correct mobile 
telephone. 
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